[brian-armstrong]

What if you accidentally revealed a private key on the screen during the screenshot? Are you willing to forfeit 10 minutes of time to keep your SSH or whatever else uncompromised? Or are you going to trust Upwork and your client to not somehow leak it, even accidentally?

[oarsinsync]

> What if you accidentally revealed a private key on the screen during the screenshot?

You replace the private key with a new one that hasn't been compromised.

> Are you willing to forfeit 10 minutes of time to keep your SSH or whatever else uncompromised?

Too late, it already is.

> Or are you going to trust Upwork and your client to not somehow leak it, even accidentally?

See above. You've already leaked it, it is now compromised and needs replacing. It sucks, but if you adopt a different approach, you're risking a lot of trouble down the road. Private keys are private. The moment you leak it, accidentally or otherwise, it's no longer private and should be replaced.

[Mithaldu]

I delete the segment and enter manual time with an explanation of why i did that. Manual time isn't protected by oDesk in disputes, but in that situation it's fine to use and low risk.

[brian-armstrong]

That's fair. What if you didn't notice that it happened?

It seems like dealing with checking for sensitive onscreen information every 10 minutes could be kind of flow-destroying.

[Mithaldu]

There's a fairly noticable popup, that you can also configure to make a sound; and if you're really worried you can review the screenshots in your work diary at the end of the day.

[cobby]

As far as I know all screenshots are available for clients right away.

[Whachadoo]

I believe it gives you something like 10 seconds to click "delete" before it uploads it, but even then you can click the screenshot from the Upwork client and it'll take you to the work schedule where you can then delete it (removing the time worked / money paid for those 10 minutes).

[rmc]

Or what if you view personal information? Under data protection law, would that could as a data breech?

[Mithaldu]

If you're dealing with personal information you should always handle with conscious care and ensure it is only handled in a way that no data breaches are possible. This does include notifying your client that you'll be doing manual time for a task, or doing it on different hardware.